Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/3vKlaL_4jinKoQzGD-rVtxFK4bw.roa
File: 3vKlaL_4jinKoQzGD-rVtxFK4bw.roa (raw, json)
Hash identifier: c9u4f7Re7rBddr2toJN7fNOBK2vtWlCdtbZGTcfyF0g=
Subject key identifier: DE:F2:A5:68:BF:F8:8E:29:CA:A1:0C:C6:0F:EA:D5:B7:11:4A:E1:BC
Certificate issuer: /CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
Certificate serial: 0F6DB273
Authority key identifier: A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/3vKlaL_4jinKoQzGD-rVtxFK4bw.roa
Signing time: Tue 21 Jun 2022 14:17:44 +0000
ROA not before: Tue 21 Jun 2022 14:17:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 51.60.0.0/16 maxlen: 24
51.188.0.0/15 maxlen: 24
51.114.0.0/16 maxlen: 24
51.80.0.0/16 maxlen: 24
51.208.0.0/15 maxlen: 24
193.26.64.0/19 maxlen: 24
51.134.0.0/16 maxlen: 24
152.134.0.0/16 maxlen: 24
51.20.0.0/14 maxlen: 24
51.74.0.0/16 maxlen: 24
51.202.0.0/15 maxlen: 24
57.101.0.0/16 maxlen: 24
51.40.0.0/16 maxlen: 24
51.168.0.0/15 maxlen: 24
51.121.0.0/16 maxlen: 24
212.167.0.0/16 maxlen: 24
185.72.192.0/22 maxlen: 24
51.160.0.0/16 maxlen: 24
51.32.0.0/16 maxlen: 24
51.214.0.0/15 maxlen: 24
143.65.224.0/19 maxlen: 24
51.100.0.0/15 maxlen: 24
51.228.0.0/15 maxlen: 24
51.127.0.0/16 maxlen: 24
212.255.0.0/16 maxlen: 24
51.248.0.0/15 maxlen: 24
83.118.240.0/20 maxlen: 24
51.220.0.0/15 maxlen: 24
195.247.0.0/16 maxlen: 24
195.119.0.0/16 maxlen: 24
51.92.0.0/14 maxlen: 24
51.240.0.0/16 maxlen: 24
51.112.0.0/15 maxlen: 24
51.139.0.0/16 maxlen: 24
51.166.0.0/15 maxlen: 24
83.118.228.0/22 maxlen: 24
143.65.0.0/17 maxlen: 24
83.118.232.0/23 maxlen: 24
57.65.0.0/16 maxlen: 24
83.118.234.0/23 maxlen: 24
143.65.128.0/18 maxlen: 24
194.52.0.0/16 maxlen: 24
51.180.0.0/15 maxlen: 24
193.186.210.0/24 maxlen: 24
83.119.128.0/17 maxlen: 24
194.234.0.0/15 maxlen: 24
194.133.0.0/16 maxlen: 24
213.72.0.0/17 maxlen: 24
51.200.0.0/15 maxlen: 24
51.72.0.0/15 maxlen: 24
57.99.0.0/16 maxlen: 24
83.119.64.0/18 maxlen: 24
195.254.0.0/17 maxlen: 24
51.172.0.0/15 maxlen: 24
51.44.0.0/14 maxlen: 24
51.226.0.0/15 maxlen: 24
193.57.169.0/24 maxlen: 24
51.125.0.0/16 maxlen: 24
193.57.170.0/23 maxlen: 24
51.192.0.0/15 maxlen: 24
51.118.0.0/15 maxlen: 24
145.17.0.0/16 maxlen: 24
195.17.0.0/16 maxlen: 24
51.24.0.0/13 maxlen: 24
193.57.254.0/23 maxlen: 24
85.213.0.0/16 maxlen: 24
57.85.0.0/16 maxlen: 24
130.24.0.0/16 maxlen: 24
193.57.181.0/24 maxlen: 24
193.57.182.0/23 maxlen: 24
51.152.0.0/15 maxlen: 24
51.78.0.0/16 maxlen: 24
51.206.0.0/15 maxlen: 24
51.151.0.0/16 maxlen: 24
85.151.0.0/16 maxlen: 24
51.50.0.0/16 maxlen: 24
193.218.122.0/24 maxlen: 24
51.16.0.0/15 maxlen: 24
51.70.0.0/16 maxlen: 24
194.198.0.0/16 maxlen: 24
57.104.0.0/13 maxlen: 24
51.212.0.0/15 maxlen: 24
159.239.0.0/16 maxlen: 24
51.84.0.0/14 maxlen: 24
51.232.0.0/15 maxlen: 24
51.131.0.0/16 maxlen: 24
51.3.0.0/16 maxlen: 24
51.76.0.0/16 maxlen: 24
51.204.0.0/15 maxlen: 24
200.224.0.0/16 maxlen: 24
51.224.0.0/15 maxlen: 24
51.96.0.0/14 maxlen: 24
51.150.0.0/16 maxlen: 24
51.164.0.0/15 maxlen: 24
51.90.0.0/16 maxlen: 24
51.117.0.0/16 maxlen: 24
51.184.0.0/15 maxlen: 24
51.110.0.0/16 maxlen: 24
51.156.0.0/15 maxlen: 24
145.55.0.0/16 maxlen: 24
51.82.0.0/16 maxlen: 24
159.109.0.0/16 maxlen: 24
151.176.0.0/16 maxlen: 24
51.176.0.0/15 maxlen: 24
51.48.0.0/15 maxlen: 24
62.230.0.0/16 maxlen: 24
51.102.0.0/16 maxlen: 24
51.129.0.0/16 maxlen: 24
83.129.0.0/16 maxlen: 24
159.244.0.0/16 maxlen: 24
51.244.0.0/15 maxlen: 24
83.116.0.0/15 maxlen: 24
185.143.16.0/22 maxlen: 24
185.143.16.0/24 maxlen: 24
200.197.0.0/16 maxlen: 24
51.69.0.0/16 maxlen: 24
51.108.0.0/16 maxlen: 24
51.236.0.0/15 maxlen: 24
51.0.64.0/18 maxlen: 24
51.34.0.0/15 maxlen: 24
195.61.0.0/16 maxlen: 24
51.0.0.0/16 maxlen: 24
51.128.0.0/16 maxlen: 24
51.0.32.0/19 maxlen: 24
193.202.192.0/19 maxlen: 24
51.196.0.0/15 maxlen: 24
57.95.0.0/16 maxlen: 24
51.122.0.0/15 maxlen: 24
51.88.0.0/16 maxlen: 24
51.216.0.0/15 maxlen: 24
51.0.128.0/17 maxlen: 24
2a11:47c0::/29 maxlen: 48
2a01:578:1080::/41 maxlen: 48
2a01:578:1010::/44 maxlen: 48
2a01:578:1020::/43 maxlen: 48
2a01:578:1040::/42 maxlen: 48
2a01:578:13::/48 maxlen: 48
2a01:578:1100::/40 maxlen: 48
2a01:578::/32 maxlen: 48
2a01:578:1400::/38 maxlen: 48
2a01:578::/36 maxlen: 48
2a01:578:1200::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258847347 (0xf6db273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
Validity
Not Before: Jun 21 14:17:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=def2a568bff88e29caa10cc60fead5b7114ae1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:3f:9c:97:78:3e:d4:03:16:f0:0f:e1:91:
be:e1:1e:41:3d:ae:1a:b1:6f:84:48:40:23:8b:8c:
46:4e:c1:60:4e:7e:7a:3a:1f:50:ec:ff:9a:c7:c1:
d2:08:ed:f6:d2:40:b7:f3:ec:ad:02:1c:80:2f:a1:
c6:60:4c:be:9e:c5:d1:4a:f3:b2:11:39:cf:8c:ce:
77:6e:dd:22:69:52:48:16:7f:28:1e:8e:65:71:a9:
54:f6:79:31:f4:6d:86:80:49:eb:b4:55:3a:a6:71:
44:55:53:e3:ab:8a:81:62:fd:af:a3:49:00:9a:bb:
3f:30:f4:d8:30:57:77:1d:7c:8e:88:5d:3e:b7:c8:
d7:59:21:bc:c7:3e:ae:a0:f4:01:67:d3:d3:64:f7:
1b:2f:65:dd:3f:e6:e9:10:5c:0d:ca:d3:d8:55:23:
5d:f0:42:8f:b7:15:0e:56:c9:3a:05:88:82:47:da:
84:84:2c:f7:91:54:0b:42:d1:9e:63:55:fd:b7:61:
2b:c7:5b:8b:c8:25:70:e3:ef:1a:38:9f:94:e7:ff:
d6:98:be:ae:75:60:6a:3e:c0:6d:51:41:5b:c5:f7:
81:af:3a:1e:5c:a0:d3:24:ef:f0:17:ee:86:f1:2c:
77:1d:50:0f:48:f5:cb:b0:40:ac:f3:83:a4:42:4d:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:A5:68:BF:F8:8E:29:CA:A1:0C:C6:0F:EA:D5:B7:11:4A:E1:BC
X509v3 Authority Key Identifier:
keyid:A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/3vKlaL_4jinKoQzGD-rVtxFK4bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/oWFT-dI9_wOJ0cjQUCAMte8cgik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/16
51.3.0.0/16
51.16.0.0/15
51.20.0.0-51.32.255.255
51.34.0.0/15
51.40.0.0/16
51.44.0.0-51.50.255.255
51.60.0.0/16
51.69.0.0-51.70.255.255
51.72.0.0-51.74.255.255
51.76.0.0/16
51.78.0.0/16
51.80.0.0/16
51.82.0.0/16
51.84.0.0-51.88.255.255
51.90.0.0/16
51.92.0.0-51.102.255.255
51.108.0.0/16
51.110.0.0/16
51.112.0.0-51.114.255.255
51.117.0.0-51.119.255.255
51.121.0.0-51.123.255.255
51.125.0.0/16
51.127.0.0-51.129.255.255
51.131.0.0/16
51.134.0.0/16
51.139.0.0/16
51.150.0.0-51.153.255.255
51.156.0.0/15
51.160.0.0/16
51.164.0.0-51.169.255.255
51.172.0.0/15
51.176.0.0/15
51.180.0.0/15
51.184.0.0/15
51.188.0.0/15
51.192.0.0/15
51.196.0.0/15
51.200.0.0-51.209.255.255
51.212.0.0-51.217.255.255
51.220.0.0/15
51.224.0.0-51.229.255.255
51.232.0.0/15
51.236.0.0/15
51.240.0.0/16
51.244.0.0/15
51.248.0.0/15
57.65.0.0/16
57.85.0.0/16
57.95.0.0/16
57.99.0.0/16
57.101.0.0/16
57.104.0.0/13
62.230.0.0/16
83.116.0.0/15
83.118.228.0-83.118.235.255
83.118.240.0/20
83.119.64.0-83.119.255.255
83.129.0.0/16
85.151.0.0/16
85.213.0.0/16
130.24.0.0/16
143.65.0.0-143.65.191.255
143.65.224.0/19
145.17.0.0/16
145.55.0.0/16
151.176.0.0/16
152.134.0.0/16
159.109.0.0/16
159.239.0.0/16
159.244.0.0/16
185.72.192.0/22
185.143.16.0/22
193.26.64.0/19
193.57.169.0-193.57.171.255
193.57.181.0-193.57.183.255
193.57.254.0/23
193.186.210.0/24
193.202.192.0/19
193.218.122.0/24
194.52.0.0/16
194.133.0.0/16
194.198.0.0/16
194.234.0.0/15
195.17.0.0/16
195.61.0.0/16
195.119.0.0/16
195.247.0.0/16
195.254.0.0/17
200.197.0.0/16
200.224.0.0/16
212.167.0.0/16
212.255.0.0/16
213.72.0.0/17
IPv6:
2a01:578::/32
2a11:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:26:a1:f5:c1:e1:86:cd:b2:e6:aa:8e:b6:44:ce:68:24:da:
13:5d:a7:3a:7d:ce:ee:34:61:ad:41:1c:03:79:71:7c:f3:24:
bf:e2:5b:6b:ce:13:be:02:0d:ea:58:ff:0c:08:30:23:30:05:
ea:22:05:27:22:d3:66:ae:2a:c9:1e:75:74:e3:c2:82:6d:6b:
a0:b5:a6:c2:d4:9f:18:0d:54:70:92:f3:d0:11:e5:75:be:af:
0b:f4:9b:3f:2d:91:45:2d:8b:f9:40:13:01:91:4f:86:f2:6e:
2e:22:c0:5f:7b:c2:88:0c:09:5a:00:a7:b2:27:d5:12:de:1e:
cf:80:64:4c:07:ec:3a:de:e4:b2:c3:02:49:f6:b8:79:b2:dd:
75:d0:f6:cb:8c:54:31:55:6e:02:c6:7b:44:09:ba:73:9d:e1:
a4:a6:1f:82:19:09:d5:72:cc:ca:17:53:bd:62:dd:69:06:20:
0b:e4:a6:43:11:02:e8:cf:98:d1:bc:50:ae:c2:44:b7:9a:f1:
8a:7f:71:5a:49:0d:1b:f8:e5:c2:e1:27:47:35:3d:82:f8:8b:
26:98:2f:b9:6d:e0:9a:19:d4:f8:3f:7d:a7:72:5c:aa:fb:39:
30:b9:6a:0b:26:71:7c:a4:eb:00:8e:41:03:b0:1b:d1:2b:e6:
9c:89:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:15 2024 by rpki-client on console-ams.rpki-client.org